[Koha-bugs] [Bug 15428] Different timeout preference for OPAC and staff interface

bugzilla-daemon at bugs.koha-community.org bugzilla-daemon at bugs.koha-community.org
Mon Apr 24 01:36:06 CEST 2023


https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=15428

--- Comment #8 from David Cook <dcook at prosentient.com.au> ---
(In reply to Katrin Fischer from comment #7)
> Marked bug 32385 as a dependency for this one. I think in order to have
> different timeouts, we need different sessions first.

I was thinking about alternatives but I think you might be right. 

In theory, an alternative would be to change how we handle timeouts. At the
moment, the session is deleted if it's timed out, but we could remove those
lines and leave the cleanup to the cleanup_database.pl cronjob.

If someone was working in both the staff interface and OPAC, the OPAC could
time out and prompt for login while they continued working in the staff
interface. Then if they log into the OPAC, both interfaces will use the new
session and new session cookie. 

However, I wonder if a browser might accidentally overwrite the new CGISESSID
with the old CGISESSID if a staff interface action happens shortly after the
new OPAC login...

Maybe different sessions are the way to go.

-- 
You are receiving this mail because:
You are watching all bug changes.


More information about the Koha-bugs mailing list